@agenticmail/enterprise 0.5.13 → 0.5.15

package/dist/cli.js

@@ -48,7 +48,7 @@ Skill Development:
     break;
   case "setup":
   default:
-    import("./setup-SZPCU3TC.js").then((m) => m.runSetupWizard()).catch(fatal);
+    import("./setup-UH5AXHZX.js").then((m) => m.runSetupWizard()).catch(fatal);
     break;
 }
 function fatal(err) {

package/dist/dashboard/pages/settings.js

@@ -48,6 +48,10 @@ export function SettingsPage() {
   var newProvider = _newProvider[0]; var setNewProvider = _newProvider[1];
   var _discoverResults = useState({});
   var discoverResults = _discoverResults[0]; var setDiscoverResults = _discoverResults[1];
+  var _apiKeyModal = useState(null); // { providerId, providerName, isUpdate }
+  var apiKeyModal = _apiKeyModal[0]; var setApiKeyModal = _apiKeyModal[1];
+  var _apiKeyInput = useState('');
+  var apiKeyInput = _apiKeyInput[0]; var setApiKeyInput = _apiKeyInput[1];
 
   useEffect(() => {
     apiCall('/settings').then(d => { const s = d.settings || d || {}; setSettings(s); if (s.primaryColor) applyBrandColor(s.primaryColor); }).catch(() => {});
@@ -558,6 +562,10 @@ export function SettingsPage() {
       setNewProvider: setNewProvider,
       discoverResults: discoverResults,
       setDiscoverResults: setDiscoverResults,
+      apiKeyModal: apiKeyModal,
+      setApiKeyModal: setApiKeyModal,
+      apiKeyInput: apiKeyInput,
+      setApiKeyInput: setApiKeyInput,
       onSave: function() {
         setPricingSaving(true);
         apiCall('/settings/model-pricing', { method: 'PUT', body: JSON.stringify(pricing) }).then(function(d) {
@@ -1310,6 +1318,22 @@ function ProvidersSection(props) {
             }, isConfigured ? 'Connected' : 'Not Configured')
           ),
           isLocal && p.baseUrl && h('div', { style: { fontSize: 12, color: '#6b7280', marginBottom: 8, wordBreak: 'break-all' } }, p.baseUrl),
+          !isLocal && !p.isCustom && p.requiresApiKey && h('div', { style: { marginTop: 8 } },
+            isConfigured
+              ? h('div', { style: { display: 'flex', alignItems: 'center', gap: 6, fontSize: 12 } },
+                  h('span', { style: { color: 'var(--success, #16a34a)' } }, '✓ API key configured via environment'),
+                  h('button', { className: 'btn btn-sm btn-ghost', style: { padding: '2px 8px', fontSize: 11 }, onClick: function() {
+                    setApiKeyInput('');
+                    setApiKeyModal({ providerId: p.id, providerName: p.name, isUpdate: true });
+                  }}, 'Update Key')
+                )
+              : h('div', null,
+                  h('button', { className: 'btn btn-sm btn-primary', onClick: function() {
+                    setApiKeyInput('');
+                    setApiKeyModal({ providerId: p.id, providerName: p.name, isUpdate: false });
+                  }}, '🔑 Add API Key')
+                )
+          ),
           h('div', { style: { display: 'flex', gap: 6, marginTop: 8 } },
             isLocal && h('button', {
               className: 'btn btn-sm',
@@ -1377,6 +1401,52 @@ function ProvidersSection(props) {
         h('button', { className: 'btn', onClick: function() { props.setShowAddProvider(false); } }, 'Cancel'),
         h('button', { className: 'btn btn-primary', onClick: handleAddProvider }, 'Add Provider')
       )
+    ),
+
+    // API Key Modal
+    props.apiKeyModal && h(Modal, {
+      title: (props.apiKeyModal.isUpdate ? 'Update' : 'Add') + ' API Key — ' + props.apiKeyModal.providerName,
+      onClose: function() { props.setApiKeyModal(null); props.setApiKeyInput(''); },
+    },
+      h('div', { style: { marginBottom: 16 } },
+        h('p', { style: { color: 'var(--text-secondary)', fontSize: 13, margin: '0 0 16px 0', lineHeight: 1.5 } },
+          props.apiKeyModal.isUpdate
+            ? 'Enter a new API key to replace the current one for ' + props.apiKeyModal.providerName + '.'
+            : 'Enter your ' + props.apiKeyModal.providerName + ' API key to enable this provider.'
+        ),
+        h('label', { className: 'form-label' }, 'API Key'),
+        h('input', {
+          className: 'input',
+          type: 'password',
+          placeholder: 'sk-...',
+          value: props.apiKeyInput,
+          autoFocus: true,
+          onChange: function(e) { props.setApiKeyInput(e.target.value); },
+          onKeyDown: function(e) {
+            if (e.key === 'Enter' && props.apiKeyInput.trim()) {
+              var m = props.apiKeyModal;
+              apiCall('/providers/' + m.providerId + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: props.apiKeyInput.trim() }) })
+                .then(function() { toast((m.isUpdate ? 'API key updated' : 'API key saved') + ' for ' + m.providerName + '!', 'success'); props.setApiKeyModal(null); props.setApiKeyInput(''); window.location.reload(); })
+                .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+            }
+          },
+          style: { fontSize: 14, fontFamily: 'var(--font-mono, monospace)' },
+        }),
+        h('p', { className: 'form-help', style: { marginTop: 6 } }, 'Your key is stored encrypted and never exposed in the dashboard.')
+      ),
+      h('div', { style: { display: 'flex', justifyContent: 'flex-end', gap: 8 } },
+        h('button', { className: 'btn', onClick: function() { props.setApiKeyModal(null); props.setApiKeyInput(''); } }, 'Cancel'),
+        h('button', {
+          className: 'btn btn-primary',
+          disabled: !props.apiKeyInput.trim(),
+          onClick: function() {
+            var m = props.apiKeyModal;
+            apiCall('/providers/' + m.providerId + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: props.apiKeyInput.trim() }) })
+              .then(function() { toast((m.isUpdate ? 'API key updated' : 'API key saved') + ' for ' + m.providerName + '!', 'success'); props.setApiKeyModal(null); props.setApiKeyInput(''); window.location.reload(); })
+              .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+          }
+        }, props.apiKeyModal.isUpdate ? 'Update Key' : 'Save Key')
+      )
     )
   );
 }
@@ -1410,6 +1480,10 @@ function ModelPricingTab(props) {
       discoverResults: props.discoverResults,
       setDiscoverResults: props.setDiscoverResults,
       toast: props.toast,
+      apiKeyModal: props.apiKeyModal,
+      setApiKeyModal: props.setApiKeyModal,
+      apiKeyInput: props.apiKeyInput,
+      setApiKeyInput: props.setApiKeyInput,
     }),
 
     // Divider

package/dist/index.js

@@ -26,7 +26,7 @@ import {
   requireRole,
   securityHeaders,
   validate
-} from "./chunk-AXLDCUI7.js";
+} from "./chunk-LNWVYHWX.js";
 import {
   PROVIDER_REGISTRY,
   listAllProviders,
@@ -36,7 +36,7 @@ import {
 import {
   provision,
   runSetupWizard
-} from "./chunk-WOJ47LRQ.js";
+} from "./chunk-VBKWGYN3.js";
 import {
   ENGINE_TABLES,
   ENGINE_TABLES_POSTGRES,

package/dist/server-JRXIBDTH.js

@@ -0,0 +1,11 @@
+import {
+  createServer
+} from "./chunk-LNWVYHWX.js";
+import "./chunk-ZNR5DDTA.js";
+import "./chunk-RO537U6H.js";
+import "./chunk-DRXMYYKN.js";
+import "./chunk-JLSQOQ5L.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  createServer
+};

package/dist/setup-UH5AXHZX.js

@@ -0,0 +1,20 @@
+import {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+} from "./chunk-VBKWGYN3.js";
+import "./chunk-6TDW6ZNI.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  promptCompanyInfo,
+  promptDatabase,
+  promptDeployment,
+  promptDomain,
+  promptRegistration,
+  provision,
+  runSetupWizard
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.13",
+  "version": "0.5.15",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {

package/src/admin/routes.ts

@@ -629,6 +629,31 @@ export function createAdminRoutes(db: DatabaseAdapter) {
     return c.json({ ok: true, provider: body });
   });
 
+  // ─── Provider API Key Management ────────────────────────
+  api.post('/providers/:id/api-key', requireRole('admin'), async (c) => {
+    var id = c.req.param('id');
+    var provider = PROVIDER_REGISTRY[id];
+    if (!provider) {
+      return c.json({ error: 'Unknown provider' }, 404);
+    }
+    var body = await c.req.json();
+    if (!body.apiKey || typeof body.apiKey !== 'string' || body.apiKey.trim().length < 5) {
+      return c.json({ error: 'Valid API key required' }, 400);
+    }
+
+    // Store API key in company settings (encrypted field)
+    var settings = await db.getSettings();
+    var config = (settings as any)?.modelPricingConfig || { models: [], currency: 'USD' };
+    config.providerApiKeys = config.providerApiKeys || {};
+    config.providerApiKeys[id] = body.apiKey.trim();
+    await db.updateSettings({ modelPricingConfig: config } as any);
+
+    // Also set in process.env so it takes effect immediately
+    process.env[provider.envKey] = body.apiKey.trim();
+
+    return c.json({ ok: true, message: 'API key saved for ' + provider.name });
+  });
+
   api.put('/providers/:id', requireRole('admin'), async (c) => {
     var id = c.req.param('id');
     if (PROVIDER_REGISTRY[id]) {

package/src/dashboard/pages/settings.js

@@ -48,6 +48,10 @@ export function SettingsPage() {
   var newProvider = _newProvider[0]; var setNewProvider = _newProvider[1];
   var _discoverResults = useState({});
   var discoverResults = _discoverResults[0]; var setDiscoverResults = _discoverResults[1];
+  var _apiKeyModal = useState(null); // { providerId, providerName, isUpdate }
+  var apiKeyModal = _apiKeyModal[0]; var setApiKeyModal = _apiKeyModal[1];
+  var _apiKeyInput = useState('');
+  var apiKeyInput = _apiKeyInput[0]; var setApiKeyInput = _apiKeyInput[1];
 
   useEffect(() => {
     apiCall('/settings').then(d => { const s = d.settings || d || {}; setSettings(s); if (s.primaryColor) applyBrandColor(s.primaryColor); }).catch(() => {});
@@ -558,6 +562,10 @@ export function SettingsPage() {
       setNewProvider: setNewProvider,
       discoverResults: discoverResults,
       setDiscoverResults: setDiscoverResults,
+      apiKeyModal: apiKeyModal,
+      setApiKeyModal: setApiKeyModal,
+      apiKeyInput: apiKeyInput,
+      setApiKeyInput: setApiKeyInput,
       onSave: function() {
         setPricingSaving(true);
         apiCall('/settings/model-pricing', { method: 'PUT', body: JSON.stringify(pricing) }).then(function(d) {
@@ -1310,6 +1318,22 @@ function ProvidersSection(props) {
             }, isConfigured ? 'Connected' : 'Not Configured')
           ),
           isLocal && p.baseUrl && h('div', { style: { fontSize: 12, color: '#6b7280', marginBottom: 8, wordBreak: 'break-all' } }, p.baseUrl),
+          !isLocal && !p.isCustom && p.requiresApiKey && h('div', { style: { marginTop: 8 } },
+            isConfigured
+              ? h('div', { style: { display: 'flex', alignItems: 'center', gap: 6, fontSize: 12 } },
+                  h('span', { style: { color: 'var(--success, #16a34a)' } }, '✓ API key configured via environment'),
+                  h('button', { className: 'btn btn-sm btn-ghost', style: { padding: '2px 8px', fontSize: 11 }, onClick: function() {
+                    setApiKeyInput('');
+                    setApiKeyModal({ providerId: p.id, providerName: p.name, isUpdate: true });
+                  }}, 'Update Key')
+                )
+              : h('div', null,
+                  h('button', { className: 'btn btn-sm btn-primary', onClick: function() {
+                    setApiKeyInput('');
+                    setApiKeyModal({ providerId: p.id, providerName: p.name, isUpdate: false });
+                  }}, '🔑 Add API Key')
+                )
+          ),
           h('div', { style: { display: 'flex', gap: 6, marginTop: 8 } },
             isLocal && h('button', {
               className: 'btn btn-sm',
@@ -1377,6 +1401,52 @@ function ProvidersSection(props) {
         h('button', { className: 'btn', onClick: function() { props.setShowAddProvider(false); } }, 'Cancel'),
         h('button', { className: 'btn btn-primary', onClick: handleAddProvider }, 'Add Provider')
       )
+    ),
+
+    // API Key Modal
+    props.apiKeyModal && h(Modal, {
+      title: (props.apiKeyModal.isUpdate ? 'Update' : 'Add') + ' API Key — ' + props.apiKeyModal.providerName,
+      onClose: function() { props.setApiKeyModal(null); props.setApiKeyInput(''); },
+    },
+      h('div', { style: { marginBottom: 16 } },
+        h('p', { style: { color: 'var(--text-secondary)', fontSize: 13, margin: '0 0 16px 0', lineHeight: 1.5 } },
+          props.apiKeyModal.isUpdate
+            ? 'Enter a new API key to replace the current one for ' + props.apiKeyModal.providerName + '.'
+            : 'Enter your ' + props.apiKeyModal.providerName + ' API key to enable this provider.'
+        ),
+        h('label', { className: 'form-label' }, 'API Key'),
+        h('input', {
+          className: 'input',
+          type: 'password',
+          placeholder: 'sk-...',
+          value: props.apiKeyInput,
+          autoFocus: true,
+          onChange: function(e) { props.setApiKeyInput(e.target.value); },
+          onKeyDown: function(e) {
+            if (e.key === 'Enter' && props.apiKeyInput.trim()) {
+              var m = props.apiKeyModal;
+              apiCall('/providers/' + m.providerId + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: props.apiKeyInput.trim() }) })
+                .then(function() { toast((m.isUpdate ? 'API key updated' : 'API key saved') + ' for ' + m.providerName + '!', 'success'); props.setApiKeyModal(null); props.setApiKeyInput(''); window.location.reload(); })
+                .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+            }
+          },
+          style: { fontSize: 14, fontFamily: 'var(--font-mono, monospace)' },
+        }),
+        h('p', { className: 'form-help', style: { marginTop: 6 } }, 'Your key is stored encrypted and never exposed in the dashboard.')
+      ),
+      h('div', { style: { display: 'flex', justifyContent: 'flex-end', gap: 8 } },
+        h('button', { className: 'btn', onClick: function() { props.setApiKeyModal(null); props.setApiKeyInput(''); } }, 'Cancel'),
+        h('button', {
+          className: 'btn btn-primary',
+          disabled: !props.apiKeyInput.trim(),
+          onClick: function() {
+            var m = props.apiKeyModal;
+            apiCall('/providers/' + m.providerId + '/api-key', { method: 'POST', body: JSON.stringify({ apiKey: props.apiKeyInput.trim() }) })
+              .then(function() { toast((m.isUpdate ? 'API key updated' : 'API key saved') + ' for ' + m.providerName + '!', 'success'); props.setApiKeyModal(null); props.setApiKeyInput(''); window.location.reload(); })
+              .catch(function(e) { toast(e.message || 'Failed to save', 'error'); });
+          }
+        }, props.apiKeyModal.isUpdate ? 'Update Key' : 'Save Key')
+      )
     )
   );
 }
@@ -1410,6 +1480,10 @@ function ModelPricingTab(props) {
       discoverResults: props.discoverResults,
       setDiscoverResults: props.setDiscoverResults,
       toast: props.toast,
+      apiKeyModal: props.apiKeyModal,
+      setApiKeyModal: props.setApiKeyModal,
+      apiKeyInput: props.apiKeyInput,
+      setApiKeyInput: props.setApiKeyInput,
     }),
 
     // Divider

package/src/server.ts

@@ -391,6 +391,29 @@ export function createServer(config: ServerConfig): ServerInstance {
             // Start health monitoring
             healthMonitor.start();
 
+            // Load saved provider API keys from DB into process.env
+            config.db.getSettings().then((settings: any) => {
+              const keys = settings?.modelPricingConfig?.providerApiKeys;
+              if (keys && typeof keys === 'object') {
+                // Map of provider IDs to their env var names
+                const envMap: Record<string, string> = {
+                  anthropic: 'ANTHROPIC_API_KEY', openai: 'OPENAI_API_KEY',
+                  google: 'GOOGLE_API_KEY', deepseek: 'DEEPSEEK_API_KEY',
+                  xai: 'XAI_API_KEY', mistral: 'MISTRAL_API_KEY',
+                  groq: 'GROQ_API_KEY', together: 'TOGETHER_API_KEY',
+                  fireworks: 'FIREWORKS_API_KEY', perplexity: 'PERPLEXITY_API_KEY',
+                  cohere: 'COHERE_API_KEY',
+                };
+                for (const [providerId, apiKey] of Object.entries(keys)) {
+                  const envVar = envMap[providerId];
+                  if (envVar && apiKey && !process.env[envVar]) {
+                    process.env[envVar] = apiKey as string;
+                    console.log(`   🔑 Loaded API key for ${providerId}`);
+                  }
+                }
+              }
+            }).catch(() => {});
+
             // Graceful shutdown
             const shutdown = () => {
               console.log('\n⏳ Shutting down gracefully...');